Article Introduction to the DoD Cyber Workforce Framework (DCWF) In response to the ever-changing world, including the increased focus on cyberspace as a theater of war, the US Department of Defense (DoD) decided…
Article Hack the Box (HTB) machines walkthrough series — AI Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article How to mitigate security risk in international business environments Introduction Gone are the days when international business was a unicorn in the business world. Instead, “going international” is becoming more…
Article Why Improper Error Handling Happens Introduction: Improper Error Handling is one of the commonly seen issues in software. Web Applications are no different and they are susceptible to…
Article Improper Error Handling Exploitation Case Study Introduction: In the earlier articles about Improper error handling, we discussed how these vulnerabilities can occur. and how they can cause…
Article DHS Cyber Hunt and Incident Response Teams (HIRT) Act: What you need to know Introduction Not a month goes by without the new media reporting that another city or municipality has fallen victim to a cyberattack, and…
Article How to exploit improper error handling In the previous article, we discussed what Improper Error Handling vulnerabilities are and what causes them. This article provides an overview of…
Article Fake Image Detection Introduction This is a frying pan. [pkadzone zone="main_top"] This is a frying pan with a badly drawn pair of eggs in it. Any questions?
Article Hack the Box (HTB) machines walkthrough series — Remote Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article BEC attacks: A business risk your insurance company is unlikely to cover The growing threat of BEC attacks Business email compromise (BEC) attacks can cost an organization millions of dollars, and the threat is growing as…
Article Overview of phishing techniques: Brand impersonation Introduction Phishing emails are well known for using different flavors of trickery to cause users to bite on the proverbial lure. Perhaps the…
Article Hack the Box (HTB) machines walkthrough series — Magic Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article Apache Guacamole Remote Desktop Protocol (RDP) vulnerabilities: What you need to know In June of 2020, security researchers at Check Point Research discovered multiple critical RDP (Remote Desktop Protocol) flaws in Apache Guacamole.…
Article Cybersecurity Weekly: Wordpress patches, NAT bypasses, Windows zero-day WordPress patches a three-year-old high-severity RCE bug. A new NAT bypass attack lets hackers access any TCP/UDP service. A Windows zero-day bug is…
Article MalLocker Android ransomware: What it is, how it works and how to prevent it | Malware spotlight Introduction Malware is persistent presence in our life. In the past few months, several pieces of different malware families were identified as…
Article Djinn 1: VulnHub CTF walkthrough, part 2 In the previous part of this article, we completed the web application exploitation part of this capture-the-flag exercise and got limited shell…
Article Data breach vs. data misuse: Reducing business risk with good data tracking Introduction Imagine this, and let’s face it, this isn't too hard: your personal data, including financial information, has been stolen in a major…
Article Photographer 1: CTF walkthrough, part 1 In this article, we will solve a Capture the Flag (CTF) challenge that was posted on the VulnHub website by an author named “v1n1v131r4”. As per the…
Article The Ultimate Guide to the MITRE ATT&CK® Framework What is the MITRE ATT&CK framework? The MITRE ATT&CK® framework is a knowledge base containing information about the various ways in which a cyberat
Article Malicious Docker images: How to detect vulnerabilities and mitigate risk Introduction Shortcuts are popular because they are more convenient and take less time. Developers have started using Docker because it allows you…
Article 55 federal and state regulations that require employee security awareness and training Introduction Humans are repeatedly described as the weakest link in the cybersecurity chain. We are highly susceptible to falling for phishing…
Article MITRE ATT&CK® Framework Matrices: An Overview Introduction to MITRE ATT&CK framework matrices The MITRE ATT&CK® framework is a tool designed to educate about cybersecurity threats and attack vec
Article MITRE ATT&CK® Framework Tactics: An Overview Introduction to MITRE ATT&CK framework tactics The MITRE ATT&CK® framework is designed to provide information about cybersecurity and the methods by
Article How to use the MITRE ATT&CK® framework and diamond model of intrusion analysis together What is the diamond model of intrusion analysis? The Diamond Model of Intrusion Analysis is based upon the premise that every cyberattack consists…
